CVE-2026-7579 AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The...

Missing Authorization

apacheairflow is vulnerable to Missing Authorization. The vulnerability exists in decorated function of auth.py due to missing authorization checks which allows a remote attacker is acquire read access to a DAG through the URL...